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EXPANDING HUMAN PRESENCE IN PARTNERSHIP 
CREATING ECONOMIC OPPORTUNITIES, ADVANCING TECHNOLOGIES, AND ENABLING DISCOVERY 


PAUYAUKS 
= ; : Operating in the Lunar Vicinity 
Now pois (proving ground) 
Using the : 


International Space Station - 


Phase 0 


Continue research-and 
testing on ISS to solve 
~ exploration challenges. - 
Evaluate potential for lunar 
-resources. Develop 
standards. 


* Phase 1. 


Begin missions in cislunar 


. space. Build Deep Space 


Gateway. Initiate. 


assembly of Deep Space ._ 


Transport. 


“After 2030 


Leaving the Earth-Moon System and 


Reaching Mars Orbit 


4 “ied » 
° 
~ 


* Phase 2 


Complete Deep Space 
Transport and conduct 
yearlong Mars 
simulation mission. 


Phases 3 and 4 


Begin sustained crew 
expeditions to : 
Martian system and 


surface of Mars. 
- 


Phase 1 Plan 
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2018 - 2025 


SLS Block 1 SLS Block 1B Cargo SLS Block 1B SLS Block 1B SLS Block 1B SLS Block 1B 
Crew: 0 Crew: 4 Crew: 4 Crew: 4 Crew: 4 
CMP Capability: 8-9T | CMP Capability: 10mT | CMP Capability: 10mT | CPL Capability: 10mT 


Habitation Logistics Airlock 


pa : . . Known Parameters: 
ie * Gateway to architecture 


(subject to : | 
approval) ace | supports Phase 2 and 
Power/Prop beyond activities 
Element ¢ International and U.S. 
commercial development 
of elements and systems 
* Gateway will translate 
uncrewed between 
cislunar orbits 
¢ Ability to support science 
objectives in cislunar 


Distant Retrograde jasneciicec Multi-TLI Lunar Near Rectilinear Halo NRHO, w/ ability to A 
Orbit (DRO) P Free Return Orbit (NRHO) translate to/from translate to/from 


26-40 days 8-21 days 16-26 days other cislunar orbits other cislunar orbits 
. 26-42 days 26-42 days 


t 2) 


space 
Gateway (blue) Open Opportunities: 
Configuration * Order of logistics flights 
‘ * | and logistics providers 
(Orion in grey) * Use of logistics modules 


for available volume 


Cislunar Cislunar 


papporuecs puppeen tant * Ability to support lurgar 
surface missions 3 


(PLANNING REFERENCE) Phase 2 and Phase 3 


Looking ahead to the shakedown cruise and the first crewed missions to Mars 


SLS Block 1B Cargo 
P/L Capability: 
41t TLI 


SLS Block 1B 
Crew: 4 
CMP Capability: 10t 


i Logistics 


Deep Space 
Transport 


DST checkout in NRHO 
191-221 days 


© 
X 


Cislunar Cislunar 


Support Flight 


SLS Block 1B Cargo 
P/L Capability: 
41t TLI 


SLS Block 2 
Crew: 4 


DST Logistics 


Logistics & 


Refueling 


DST: shakedown in 
cislunar space with 


return to DSG in NRHO a 
el) 


300-400 days 


Support Flight 


SLS Block 2 Cargo 


CMP Capability: 13+t 


| 
| Cislunar 
| Support Flight 


SLS Block 2 
Crew: 4 
CMP Capability: 13+t 


Logistics 
=i 


P/L Capability: 
45t TLI 


DST 
Logistics & 
Refueling 
SLi 


& 
: DST: Mars transit 


and return to DSG 
in NRHO 


Known Parameters: 

¢ DST launch on one SLS 
cargo flight 

¢ DST shakedown cruise 
by 2029 

¢ DST supported by a mix 
of logistics flights for both 
shakedown and transit 

* Ability to support science 
objectives in cislunar 
space 


Open Opportunities: 

* Order of logistics flights 
and logistics providers 

¢ Shakedown cruise 
vehicle configuration and 
destination/s 

¢ Ability to support lunar 
surface missions 
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Advanced Exploration Systems (AES) Division 


¢« NASA's Advanced Exploration Systems (AES) division is pioneering 
innovative approaches and public-private partnerships to rapidly develop 
prototype systems, advance key capabilities, and validate operational 
concepts for future human missions beyond Earth orbit 


¢ AES activities are related to crew mobility, habitation, vehicle systems, 
robotic precursors, and foundational systems for deep space 


¢ AES infuses new technologies developed by the Space Technology 
Mission Directorate and partners with the Science Mission Directorate to 
address Strategic Knowledge Gaps for multiple destinations 


¢ AES is leading NASA’s Deep-Space Gateway & Transport (DSG&T) Efforts 


AES Avionics & Software (A&S) Project 


¢ AES Avionics & Software (A&S) Project Goal: 


— Define and exercise an avionics architecture that is open-source, highly reliable with 
fault tolerance, and utilizes standard capabilities and interfaces, which are scalable 
and customizable to support future exploration missions 


¢ A&S Drivers: 


— Technology Transparency 


¢ The underlying hardware should not have any impact on an application either during 
development or execution 


¢ Code reuse and portability 
— Reliability and Maintenance 


¢ Operate in the presence of failures so that Maintenance Free Operating Periods (MFOPS) 
can be achieved 


¢ Provide autonomous operations 
¢ Minimal number of unique spares 
— Incremental Update & Certification - Designed for Growth and Change 
¢ Applications can be inserted/altered with minimum impact on other systems and on the 
supporting safety case 
¢ Flexible scheduling to meet the deadlines of all the applications for each viable 
configuration and when system is upgraded 


AES Avionics & Software (A&S) Project 


¢ A&S Focus Areas and Objectives: 


— Command & Data Handling (C&DH) - Define a reliable, high-performance 
& modular C&DH architecture and build HW catalog 


— Software - Provide a reusable software architecture and tools suitable for 
human-rated missions 


— Human Interfaces - Identify, integrate & test human interface technologies 
that are scalable, sustainable, and evolvable to support future exploration 


— Communication and Wireless Systems - Enable interoperable, wireless 
& networked communication for inter/intra-vehicle systems 


— Systems Engineering and Integration (SE&l) - Model, build & test 
flexible and robust integrated vehicle systems 


¢ A&S Benefits: 


— Results in an open architecture that allows use of hardware from multiple 
vendors 


— Enables use of evolving (near-launch) technology 


— Ability to upgrade capabilities and infuse new technologies with cost 
effective validation 
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RC frames can 
be generated by 
COTS devices 


Rate-Constrained (A664-p7) 
(Asynchronous critical systems) 


* Traffic shaping and policing ensures 
successful message delivery. 

* Provides event-driven communication 
between synchronization domains. 


Data 
Recorders 


Best-Effort (IEEE 802.3) 
(Crew interfaces and science) 
* Classical LANs can run isolated from 


or overlapping TT/RC network. IEEE 802.11 
* COTS hardware easily upgraded. 


Time-Triggered (SAE AS6802) 
(Vehicle Command and Control) 


¢ All messaging is into/out of C&DH system. 
¢ Periodic and generally low bandwidth. 


Cameras, 
Audio, and 
Portable 


gold Effectors 
Sensor Data é Heaters pu Storage/ 
(High rate) 1FT C&DH System <Punpe rocessing 
* Optical navigation using CFS and SBN eaves 


Docking Rate-constrained 
Interface traffic can be used 


* Autonomous systems 


¢ Motors 


> 100 Mbit/s 


by subsystems 
traditionally limited 
to P2P comm. 


Classical Ethernet LAN Sensor Data 


(Low rate) 

+ Star tracker 

* IMU/SIGI Command/ 

+ Sun sensor ; Distributed Telemetry 
Onboard + Thrusters <5 Mbit/s Processing Processing 
Displays « Temperature *RIU/DAU 

* Humidity . ; 

* Oxygen, CO, lat mac Equipment 

+ Flow rate * Propulsion unique cabling 
Direct audio/ + Voltage *ECLSS 


video signals 


Transponders (SDR) 


Onboard 


Gateway S-band, Ka-band, X- —— Voting at Interface 


band, Proximity (UHF) 


High Speed Serial 
(P2P, minimal networking) 
[1] Rakow, Glenn Spacecraft Crew- 


* Provides >1Gbit/s point-to-point or : Sy : pais 
(possibly) networked messaging. Pir ia xX aie ilies ee and 
* Mostly related to off-board communication. p , ~—_~ ommunication Flo 


Blueprint of the Architecture: 


Distributed Integrated Modular Avionics (D-IMA) 


Distributed 


Integrated 


Modular 


Avionics 


Controller HEA) 
Type a Processor 

Controller 
Type b 


D-IMA Smart System 


Resources (both hardware and software) are 
physically distributed 


Multiple functions of different criticalities 
running on separate, high integrity, partitions 


Standard interfaces/Virtual Backplane 
Avionics boxes built up of hub card(s), power 
supply(s) and subsystem slices 

Software constructed of re-locatable modules 


Board level building blocks used to assemble 
boxes into systems 


Bus I/F 


Remote 
Interface Unit 


Reduce harness mass 
Provide for local control of local functions 
Lowers flight computer load 


Re-locatable functions not limited to a single 
line replaceable unit (LRU) boundary 


Provides for composability 
Allows for hardware reuse 
Allows for software reuse 


Allows for multiple vendor hardware 
components 


Sensor & 
Effectors 
Qa 


Sensor & 
Effectors 


B 
IMA Networked System 
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NASA’s Core Flight Software (CFS) 


¢ Core Flight Software (CFS) is a NASA-developed asset for spacecraft 
flight software reuse that is available as open-source: 


— http://sourceforge.net/projects/coreflightexec/ 


¢ Productized real-time flight software developed over several years by 
Goddard Space Flight Center to serve as reusable software framework 
basis for spacecraft missions, test missions, real-time systems 


¢ AES has since advanced the product line, including achieving human- 
rating, as a reusable software solution for future exploration missions 


¢ CFS provides a published service layer (CFE) and an Operating System 
Abstraction Layer (OSAL) for common services to run on multiple 
platforms and with several operating systems 
— Pub/Sub message bus, time services, events, tables, file, task execution 


— http://sourceforge.net/projects/osal/ 


¢ CFS provides common reusable spacecraft functions as open-source or 
government-purpose applications 


— Scheduler, commanding, telemetry, communication, data recording, limits, system 
health, sequences 4 


CFS Architecture 


Core Flight Software Framework- |!’ tional CFS Application Software Architecture 
Architectural Layers 


Data To/From Vehicle 


* 


File ae 
A i. Ars Manager |<» Mass 
Mission Specific CFS Reusable storage 
Device 


CFS Apps Apps 
Mission l 
. r Specific ) Data 
cFE (core Flight Executive) co pane z ‘> ee 
ervices API jj 
Hardware 
Specific 


Device 1/0 . Inter-task Message Router 


Asai (Software Bus — Publish/Subscribe) Health & 
Platform Specific Package aia +> safety 
——— Manager 
(PSP) — 
e Core Services 
@ Example CFS Reuse Apps Software Time Executive Event Table 
Services Services Services Services 
ee ee Bus 
@ Mission Specific Apps 


¢ CFS also provides a mechanism to link distributed CFS instances called 
Software Bus Network (SBN), including an SBN library (SBN-lib) for non- 
CFS applications that need access to software bus data 


Some CFS Supported Platforms: Non-Exhaustive 


¢ CFS has been ported to work on many processors... 


LEON3 


DUAL CORE 
400 MHz 


LEON3 Space Micro Proton 400K 


Pw f 
a 4 


. f - 
AITECH SPO0-100 Intel x86 


Maxwell SCS750 


¢ ...and with many operating systems, both real- and non-real-time 


Linux’ (TEMS) 
A GC 
hae 


Green Hills: CF PikeOS* 


SOFTWARE 


Backbone of the Architecture: 


Time-Triggered Ethernet 


Time-Triggered Ethernet (TTE) is compatible with, can coexist with on the same physical media, 
and expands classical Ethernet with services to meet time-critical or deterministic conditions, 
supporting three message types: 


Priority-based 
asynchronous 


Ethernet traffic 


Synchronous 


traffic 


“a 


Rate-constrained 


Time-triggered (SAE AS6802): Sent over the network at predefined times and take precedence 
over all other message types 
— Occurrence, delay and precision of messages are predefined and guaranteed 


Rate-constrained (ARINC 664 p7): Used for applications with less stringent determinism and 
real-time requirements 
— Bandwidth is predefined and guaranteed for each application and delays/jitter have defined limits 


Best-effort (IEEE 802.3): Follow classical Ethernet policy 
— Use the remaining network bandwidth and have lower priority than TT or RC messages 


TTE Standards exist or are in-work and NASA supports development of an open TTE Standard 
— SAE AS6802 — Time-Triggered Ethernet 
— European Cooperation for Space Standardization (ECSS) ECSS-E-ST-50-16 — Time-Triggered Ethernet 
— Consultative Committee for Space Data Systems (CCSDS) Sub-Network Services WG 


(RC) traffic 
—— 


Regular traffic 


TE thernet:- 


Sikorsky S-97 RAIDER NASA’s Orion Spacecraft 


Reliability and Robustness: 


Triplex Voting Architecture 


¢ Developed a 1-Byzantine Fault tolerant 
voting architecture using TTE and CFS 
using current COTS technologies 
¢ Three Onboard Computers (OBC) 
¢ Three High-Integrity (command/monitor) TTE 
Switches 
¢ Remote Interface Units (RIU) 


¢ Architecture is scalable through 
additional network planes, high-integrity 
devices, etc. 


¢ Approach uses TTE for data distribution 
and sync and built CFS apps to do so 


¢ Benefits of the voting architecture: 
¢ Enables the use of COTS single board computers 
¢ — Eliminates need for separate cross-channel data link 
¢ — Eliminates need for separate timing hardware 


¢ Paper: “A Proposed Byzantine Fault-Tolerant Voting 
Architecture using Time-Triggered Ethernet” 


The Crew Element: 
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¢ Developed a human interface architecture to reduce barriers between the crew and 
the vehicle 


¢ Core component is the Human Interface Management Computer (HIMaC) that acts as a 
Display Server, Telemetry/Command Exchange Server and Audio/Video Server 
¢ HIMaC is tied to flight software bus network and supports different traffic classes 


¢ Architecture consists of open interface standards to provide flexible and 


reconfigurable peripherals 
¢ Displays, Controls, Wearables, Audio, Video, Virtual/Augmented Reality 


¢ Provides a robust approach to data security 


¢ Designed to be scalable, sustainable, and evolvable enabling support for system build 
up, upgrades and extensions 


Human Interface Portable Computer Clients 
Management Computer = Tablet, laptops, and wearables 
ms providing flexible use, lightweight, 


== mobile, and scalable display options 


Tlm/Cmd Path 


Flight 
0CO0 E6CD O0A1 54DA 409D 019E 001E AF9S. 
Software 0000 0000 0000 0000 0000 0000 0000 0000 
000 ped on ~~ ~— 0000 00000000 


Bus 93B0 73E0 
me A002, xeor 4908 or ra 2E07 49D8 39F0 

4011 9703 A4EC 1CF8 4015 9703 A4EC 1CF8 

4019 9703 A4EC 1CF8 401D 9703 A4EC 1CF8 

4020 CB81 D276 OE7C 4022 CB81 D276 OE7C 


CCSDS Space 
Packets 


Rugged Display Clients 
Fixed, safety critical, radiation tolerant 


displays containing a Software Graphics 
Processing Unit 


Physical Controls & Indicators 

Ultra reliable audio, indicators, switches 

and hand controllers for mission critical 
functions 16 


Can You Hear Me Now?: 
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¢ The communication links that the architecture is designed to support include: 
¢ DSG «~ Earth 
e DSG vas Lu nar Surface Consultative Committee 
CcsDs 
¢ DSG < Visiting Vehicle ——e 
¢ DSG < Proximity/Wireless Communications (i.e. Extra-Vehicular Activity (EVA)) 


¢ Architecture supports several standard wireless standards and technologies for 
internal spacecraft and proximity communications 


— IEEE 802.11 Family 

5G Technology (LTE) 

— Wireless Sensor Networks 

Radio Frequency Identification (RFID) for both logistics and sensing 


¢ Candidate standards and technologies have been identified, are still being 
evaluated, and have not been finalized 


— Optical communication is also being looked at for DSG 


¢ Will leverage the Interagency Operations Advisory Group (lIOAG) Service Catalog i 
and Consultative Committee for Space Data Systems (CCSDS) Standards 


¢ Internetworking capabilities are a requirement, and must operate in the presence 
of time delays and outages 5G 


— Delay/Disruption Tolerant Networking (DTN) is the solution 


Connecting to the Solar System Internet (SSI): 


Delay/Disruption Tolerant Networking (DTN) 


¢ Delay/Disruption Tolerant Networking (DTN) is an AES developed protocol suite that extends the 
terrestrial Internet capabilities into highly stressed data communication environments where the 
conventional Internet does not work 


— These environments are typically subject to frequent disruptions, unidirectional/asymmetric links, 
long delays and high error rates 


¢ DTN is being standardized by the Consultative Committee for Space Data Systems (CCSDS) and 
the Internet Engineering Task Force (IETF) DTN Working Groups 


¢ NASA’s Interplanetary Overlay Network (ION) DTN implementation is open-source software: 
— https://sourceforge.net/projects/ion-dtn/files/ 


¢ Some of the benefits of DTN include improved operations and situational awareness, 
interoperability and reuse, space link efficiency, utilization and robustness, security and quality- 


of-service 
DTN User Applications 
(e.g. File Transfer, Messaging, Science Data) 


Bundle Protocol Security (BPSec) 


Bundle Protocol (BP) Tr) 13) | 1) {\j 


Licklider Transmission Protocol (LTP) 
or other Convergence Layers DELAY /DISRUPTION TOLERANT NETWORKING 


Underlying Transport Mechanisms 
Implementation Implementation Implementation 
Not Part of DTN 
Exists; Standard Exists; Standard Exists; Standard - ra 18 
Exists In-Work Planned 


Quality of Service (QoS) 
Schedule-Aware Bundle 
Routing (SABR) 
Security Key 
Management 
Asynchronous 
Management Protocol 


Putting it All Together: 
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¢ Determined the necessary avionics functions for architecture, allocated the functions to 
abstract systems and implemented the systems to perform the functions 


¢ Modeled the avionics and software architecture using Model-Based Systems Engineering 
(MBSE) tools using the Systems Modelling Language (SysML) throughout life-cycle 


¢ Led the migration of other spacecraft subsystems to run CFS applications on path-to-flight 
processors and connect to the architecture 
— Power, Environmental Control and Life Support System (ECLSS), Vehicle Autonomy applications, etc. 


¢ Conceptualized mission scenarios to exercise/stress the architecture through both 
simulation and testing 


triplex : FCs 
du : Display Unit byod : byodDisplays: a — 
G1: BYOD display . triplex: FCs 4 : FC 
_ 26700 cipay = 4:FC tte : TTeSwitches 
sx} }  rretheorar = Revsable Apps : CES Reusable Apps 
8 WS - ACAWS. — = 
‘ales APS —o~ vs (poate ppattde \ [4s tteswiten . cfe-core 
MBsUt :MBSU2 on \ Boa pt ACAWS : 
sbn: SBN_LV sbn: SBN_LV waa “| | ppaH : ppaHyde 
. 2:FC : 
Pout =PDU2 ; | tte : tte 
— (FS Reusable Apps 
sbn: SBN_LV sbn: SBN_LV 3B | Bee cteesne| || |) |= = 
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pe APC Z a / 7yp2__P2 p> | 'GES Reusable Apps 
ts 
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cis CFS Reusable Apps dtnHost : DTN host CPU PP: a Pp y' 
tte : tte 
dle cfe-core 
= CFS: cFS Reusable Apps 3: TTeSwitch 
pet: NPASHostPC1 . p3 ps 
ee ‘SoPC : ASO Host PC 
st . 
— I: . 3: EC 
pe2:NPASHostPC2) .. Es soo Apps 
‘sbn2 © sbn_lib le E 
SS VHS ASO Vehide Mananger : CES Reusable Apps 
pe3 : NPAS Host PC 3 reese - efe-core 
‘sbn3- sbn_lib . 
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Supporting Future Autonomous Systems 


¢ As human exploration moves farther out into space, the need for autonomous systems 
significantly increases 
— Many functions of the current Mission Control Center (MCC) will need to move onto the spacecraft 


¢ AES, STMD and others within NASA are researching various autonomy applications that 
could be used as part of the Deep-Space Gateway and Transport efforts 


¢ NASA is also closely tracking commercial developments that could support autonomous 
systems 


— Aland Cognitive Computing, Deep-Learning Algorithms, Model-based Condition Monitoring, Industrial and 
Home Automation, loT, etc. 


¢ The developed avionics and software architecture will serve as a platform to exercise 
acaba applications and concepts 
Exercise onboard autonomous Integrated Vehicle Health Management (IVHM) applications 
— Explore distributed and centralized autonomy concepts 
— Build crew and ground operator familiarity and comfort with autonomy applications 
— Provide reliable command/control capabilities for spacecraft subsystems 
— Provide additional processing/storage for less-capable systems 
— Monitor subsystems and serve as an operations advisor 


¢ Open architecture will also serve as a technology development platform to help establish 
partnerships and collaborations to further enhance architecture 
— Support Academia, International Partner or commercial technologies 
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RC frames can 
be generated by 
COTS devices 


Rate-Constrained (A664-p7) 
(Asynchronous critical systems) 


* Traffic shaping and policing ensures 
successful message delivery. 

* Provides event-driven communication 
between synchronization domains. 


Data 
Recorders 


Best-Effort (IEEE 802.3) 
(Crew interfaces and science) 
* Classical LANs can run isolated from 


or overlapping TT/RC network. IEEE 802.11 
* COTS hardware easily upgraded. 


Time-Triggered (SAE AS6802) 
(Vehicle Command and Control) 


¢ All messaging is into/out of C&DH system. 
¢ Periodic and generally low bandwidth. 


Cameras, 
Audio, and 
Portable 


gold Effectors 
Sensor Data é Heaters pu Storage/ 
(High rate) 1FT C&DH System <Punpe rocessing 
* Optical navigation using CFS and SBN eaves 


Docking Rate-constrained 
Interface traffic can be used 


* Autonomous systems 


¢ Motors 


> 100 Mbit/s 


by subsystems 
traditionally limited 
to P2P comm. 


Classical Ethernet LAN Sensor Data 


(Low rate) 

+ Star tracker 

* IMU/SIGI Command/ 

+ Sun sensor ; Distributed Telemetry 
Onboard + Thrusters <5 Mbit/s Processing Processing 
Displays « Temperature *RIU/DAU 

* Humidity . ; 

* Oxygen, CO, lat mac Equipment 

+ Flow rate * Propulsion unique cabling 
Direct audio/ + Voltage *ECLSS 


video signals 


Transponders (SDR) 


Onboard 


Gateway S-band, Ka-band, X- —— Voting at Interface 


band, Proximity (UHF) 


High Speed Serial 
(P2P, minimal networking) 
[1] Rakow, Glenn Spacecraft Crew- 


* Provides >1Gbit/s point-to-point or : Sy : pais 
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Key Takeaways 


¢ The AES A&S project has developed an Avionics & Software 
architecture that is: 


— Open-source, with standard capabilities and interfaces 
— Highly reliable with 1-Byzantine fault tolerance 


— Scalable and customizable to support future exploration missions such as the 
Deep Space Gateway and Transport 


— Built on a foundation of NASA's Core Flight Software (CFS) and Time- Triggered 
Ethernet (TTE) 


— Realizable with currently available COTS technology and supports multi-vendor 
hardware 


— Fully modeled in SysML, implemented and tested in relevant environments 


— Designed to support various autonomy technologies that will be needed for deep- 


space human exploration o 


